Privacy Policy

CustomBoxesLabs (“we,” “us,” or “our”) operates the website customboxeslabs.com (the “Site”). This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our Site or use our services, including when you request a packaging quote, place an order, or communicate with us.

By using our Site, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our Site.

1. Information We Collect

Information you provide directly:

• Quote requests: When you submit a quote request, we collect your name, business name, email address, phone number, shipping address, and packaging specifications (dimensions, quantity, materials, print requirements).
• Orders: When you place an order, we collect billing information, shipping address, and payment details. Payment card data is processed by our payment processor (Stripe or equivalent) and is not stored on our servers.
• Communications: When you contact us by email or through the Site, we collect the content of your messages and your contact details.
• Account registration: If you create an account, we collect your email address and password (stored in hashed form).

Information collected automatically:

• Usage data: IP address, browser type, operating system, referring URLs, pages visited, time spent on pages, and click behaviour — collected via server logs and analytics tools.
• Cookies: Small data files stored on your device. See the Cookies section below for details.
• Device information: Device type, screen resolution, and browser settings.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide our services: Processing quote requests, fulfilling orders, and communicating about your packaging specifications.
• To operate the Site: Maintaining, improving, and securing the Site and its functionality.
• To communicate with you: Responding to your enquiries, sending order confirmations, production updates, and shipping notifications.
• To send marketing communications: With your consent, sending information about new products, services, and promotions. You may opt out at any time.
• To analyse Site performance: Understanding how visitors use the Site and improving user experience.
• To comply with legal obligations: Meeting applicable legal requirements, including tax and accounting obligations.
• To detect and prevent fraud: Identifying and addressing security issues and fraudulent activity.

Our legal basis for processing your data is: contract performance (when fulfilling your order), legitimate interests (for analytics and security), legal obligation (for compliance requirements), and consent (for marketing communications).

3. Information Sharing

We do not sell your personal information. We share your information only in the following circumstances:

• Service providers: We share information with third-party service providers who help us operate our business — including payment processors, shipping carriers, email service providers, and cloud hosting providers. These providers are contractually obligated to protect your information and may only use it to provide services to us.
• Manufacturing partners: To fulfil your order, we may share your specifications (not your payment or personal contact information beyond what is operationally necessary) with our production and manufacturing partners.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information is transferred and subject to a different privacy policy.
• Legal requirements: We may disclose your information where required by law, court order, or government authority, or where we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4. Cookies and Tracking

We use cookies and similar tracking technologies to collect information about your use of the Site. Cookies are small text files stored on your device.

Types of cookies we use:

• Essential cookies: Required for the Site to function correctly. Cannot be disabled without affecting Site functionality.
• Analytics cookies: Help us understand how visitors interact with the Site (e.g. Google Analytics). These are pseudonymised and do not identify you personally.
• Marketing cookies: Used to deliver relevant advertising on third-party platforms. Only set with your consent.

You can control cookies through your browser settings. Note that disabling certain cookies may affect Site functionality. Most browsers allow you to block or delete cookies via their settings menu.

5. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required by law.

• Order records: Retained for 7 years for accounting and legal compliance purposes.
• Quote requests: Retained for 2 years from the date of the request.
• Marketing communications data: Retained until you unsubscribe, after which it is deleted within 30 days.
• Analytics data: Retained in aggregated, anonymised form for up to 26 months.

When data is no longer needed, we delete or anonymise it in accordance with our data management procedures.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: The right to request a copy of the personal information we hold about you.
• Correction: The right to request correction of inaccurate or incomplete personal information.
• Deletion: The right to request deletion of your personal information, subject to legal retention obligations.
• Restriction: The right to request that we restrict processing of your personal information in certain circumstances.
• Portability: The right to receive your personal information in a structured, machine-readable format.
• Objection: The right to object to our processing of your personal information based on legitimate interests.
• Withdrawal of consent: Where processing is based on your consent, the right to withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at privacy@customboxeslabs.com. We will respond within 30 days. We may need to verify your identity before processing your request.

If you are located in the European Economic Area (EEA), UK, or California, additional rights and protections apply under GDPR, UK GDPR, and CCPA respectively.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and our Site
• Encrypted storage of passwords and sensitive account information
• Access controls limiting personal data access to authorised personnel only
• Regular security assessments and updates

No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. If you believe your data has been compromised, contact us immediately at privacy@customboxeslabs.com.

8. Children’s Privacy

Our Site and services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child under 16, please contact us immediately and we will take steps to delete the information.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. We will notify you of material changes by posting the updated policy on this page with a revised “Last updated” date. For significant changes, we will provide additional notice (such as an email notification if you have an account with us).

Your continued use of the Site after any changes constitutes your acceptance of the updated Privacy Policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We aim to respond to all privacy-related enquiries within 5 business days.